Analysis
-
max time kernel
44s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
03/10/2022, 22:35
General
-
Target
fbceced3bf0d8478ca28b7fa94ea1a3200c949e7780f60f369d1aa272e2ed2da.exe
-
Size
136KB
-
MD5
41396544839139d2669a9eafa1e327e0
-
SHA1
8140748f23cc6f0fa97c3249870e6570d6616a86
-
SHA256
fbceced3bf0d8478ca28b7fa94ea1a3200c949e7780f60f369d1aa272e2ed2da
-
SHA512
cf019d852513e136ce3bbf974033e5b9b2eeab75f8d9dba9127198a28d067215e13cd32f4c6d1e1072f4d08838acda568a5efdef5647dee064bac50673d19715
-
SSDEEP
3072:pCea5hAU40+NaglSffpEGmkt7VgQF7p10r4X07lLt+NNwCZVykd86NJFDm/b:pCea5hAGEKEGmkt2QppmUXYt+NNDZVyV
Score
8/10
Malware Config
Signatures
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fbceced3bf0d8478ca28b7fa94ea1a3200c949e7780f60f369d1aa272e2ed2da.exe"C:\Users\Admin\AppData\Local\Temp\fbceced3bf0d8478ca28b7fa94ea1a3200c949e7780f60f369d1aa272e2ed2da.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\fbceced3bf0d8478ca28b7fa94ea1a3200c949e7780f60f369d1aa272e2ed2da.exe?2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
168KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
168KB